I wonder if it makes any sense to use a random character and numbers as primary account name instead of real one with Proton.
I mean, I created my original account totally with random characters like asr378ataq3byZ@pm.me but for convenience I am thinking about using my normal email hosted on Proton like name.surname@customdomain.tld. At the moment it is assigned as an alias, but I will make it primary
Will that pose any security and privacy risk?
I’m the same as you - randomly generated username for my proton account, but I also have my firstname@lastname.tld email hosted with them. So from that, they obviously know who I am. I haven’t created an alias of firstname.lastname@proton.me purely due to me favouring keeping my usernames consistently random across all services I use, and any additional aliases you create can be used to login to Proton.
It doesn’t matter.
Your password should already be strong enough, and you also should use 2FA, preferably security keys.
Then it is good. Proton support also confirmed the same.
Kindly note that you can login into your account either with the username or any address that belong to this account, like name.surname@domain.tld for example. So from a security stand point, it will not make a difference which address you set as the default on your mailbox.
I already have strong password, security keys, passkey and 2FA activated and recovery phases are backed up. I also gave a random Tuta address as recovery email just in case.
That’s unnecessary attack surface, in my opinion.
Maybe but once you forget password and would want Proton to remind you, recovery email gets handy.
Just contact their support and they will help you recover your account.